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Abstract — Topological quantum error-correcting codes are de- 
fined by geometrically local checks on a two-dimensional lattice of 
quantum bits (qubits), making them particularly well suited for 
fault-tolerant quantum information processing. Here, we present 
a decoding algorithm for topological codes that is faster than 
previously known algorithms and applies to a wider class of topo- 
logical codes. Our algorithm makes use of two methods inspired 
from statistical physics: renormalization groups and mean-field 
approximations. First, the topological code is approximated by 
a concatenated block code that can be efficiently decoded. To 
improve this approximation, additional consistency conditions 
are imposed between the blocks, and are solved by a belief 
propagation algorithm. 

I. Introduction 

Topological quantum error-correcting codes (TQECC) H], 
ill], |3 | are defined on two-dimensional lattices of qubits with 
geometrically local parity checks. Thus, they are a form of 
quantum LDPC codes with an additional locaUty requirement 
imposed to their Tanner graph. To appreciate the importance 
of this feature, recall that in quantum mechanics, measuring 
a qubit alters its state. To detect errors, it is not possible 
to measure each qubit separately and verify that they satisfy 
all the check conditions — like it is done classically — without 
destroying the encoded information. Instead, it is necessary to 
perform a collective measurement on all the qubits involved 
in a given check, which requires having the qubits physically 
interact with each other, or with a mediator system. Thus, 
having local checks is an extremely important feature that 
explains — together with the possibility of implementing some 
gates topologically ||2l, flU, 15], 16], Q — the growing interest 
in topological quantum codes. 

The prominent example of TQECC is Kitaev's toric code 
family |[T], ||2] that we define below. For these codes, defined 
on a toric qubit lattice, errors in the same homology class have 
the same effect on the encoded information. Thus, maximum- 
likelihood decoding consists in identifying the lowest weight 
homology class of equivalent errors. Previously, a decoding 
algorithm based on perfect matching 1 8 1 was proposed which 
identifies the lowest weight error, ignoring the equivalence 
relation set by homology [I J. The complexity of this algorithm 
is quite prohibitive, where i is the linear size of the 

lattice. Other topological codes jJI had no known efficient 
decoding algorithm. 

In 19] we presented a new decoding algorithm for TQECC. 
The essential idea of this algorithm borrows from the renor- 
malization group method of statistical physics. Intuitively, we 



can think of a TQECC on a lattice of linear size £ ~ 2^^ 
as consisting of c levels of concatenation of a TQECC on 
a lattice of linear size 2. Concatenated quantum codes can 
be decoded efficiently by a recursive algorithm LIOJ . Starting 
from an error model characterizing the channel, each 2x2 
lattice is soft-decoded, producing an effective "renormalized" 
error model on its logical qubits. This error model is passed 
to the next level of concatenation, and we recurse. The 
recursion ends after c = \og£ iterations, where it outputs a 
probability vector describing the encoded information. Each 
round involves decoding at most constant size TQECC, 
so the overall complexity is i?'{£'^\og£) and can easily be 
parallelized for a total runtime of ^?{log£). 

Because TQECC are not truly concatenated codes, the intu- 
ition explained above cannot be turned into a rigorous method, 
and some approximations are necessary. In this paper, we give 
a detailed presentation of the approximation techniques used 
in Ref. ||9l and present some results obtained from our method. 

II. Kitaev's TORIC CODE 

The state of a collection of n qubits can be specified by a 
vector in the complex Hilbert space (C^)®" = C^(8)C^(Ki 
. . . (g) C^. Each vector space in this tensor decomposition 
is associated to a qubit. A code on n qubits is a subspace 
of (C^)**". For Kitaev's code — like all stabilizer codes — this 
subspace is specified by a set of mutually commuting operators 
that play a role similar to the rows of a parity-check matrix. 

To define these operators, it is convenient to display the 
qubits on a regular square lattice with periodic boundary 
conditions, i.e. with the topology of a torus. There is one 
qubit on each edge of the lattice, for a total of n = 2£'^ qubits 
for a £ X £ lattice. For each site s (vertex) of the lattice, we 
define a site operator Ag = (^^ees -^(^ '^^'^ ^'^^ each plaquette 
p (site of the dual lattice), we define a plaquette operator 
Bp = {^egp Ze- These definitions use the Pauli matrices 

and we use to denote the Pauli operator X acting on the 
qubit located on edge e, i.e. Xe = I®I(^...^X(S)...^I 
where X appears at position e and / denotes the 2x2 identity 
matrix. The notation e e s denotes the set of edges e adjacent 
to site s, and similarly for v G p. 

Because ZX = iY, the Pauli operators X^ and Z^, 
e = l,...,n form a group under multiplication, the Pauli 



group of n qubits {i,Xj,Zj). Every element in this group 
squares to the identity (modulo a phase, that we henceforth 
omit). These generators obey canonical commutation relations: 
all pairs of generators commute, except X^. and that 
anti-commute. It follows from these relations that the Ag 
and Bp all mutually commute. The commutation of the As 
among themselves is trivial since they are all made up of X 
matrices, and similarly for the commutation of the Bp among 
themselves. The commutation of a As with a Bp follows from 
the fact that a site and a plaquette either have no common 
edge, or they have two. Both cases imply an even number of 
anti-commuting operators, so they commute. 
The code is now defined as the subspace 

^ = {|^)G(C2)^":A,|V') = Sp|^) = |V) Vs,ri. (1) 

This is an eigenvalue equation, and because the Ag and Bp 
mutually commute, they indeed share common eigenvectors. 
In this definition of the code the operators As and Bp 
play a role analogous to the rows of a parity check matrix in 
a classical linear code in the sense that they impose (local) 
constraints on the codewords. 

We will consider errors F from the Pauli group. In partic- 
ular, we will be interested in the depolarizing channel — the 
natural generalization of the binary symmetric channel to the 
quantum setting — for which each qubit is left unchanged with 
probability 1 — p, or is affected by X, Y or: Z each with 
probability |. In other words, all errors F from the n-qubit 
Pauli group (modulo phase) are permitted, and the probability 
of a given error is 

P(^^) = (l-p)"-l^l|'^', (2) 

where the weight of F, denoted \F\, is the number of tensor 
factors on which it differs from the identity (generalizing the 
Hamming weight). 

When an error F occurs on a code state j?/'), the resulting 
state F\-4>) will in general no longer be a +1 eigenstate of the 
star and plaquette operators: F\tp) is a +1 eigenstate of As 
when F and As commute, and it is a — 1 eigenstate when they 
anti-commute, and similarly for Bp. By measuring each star 
and plaquette operators, we obtain a list of Cs and Cp — ±.1 
forming the error syndrome c = (Cp, c^). Given these, error 
correction can proceed by identifying the most likely error 
compatible with the syndrome, Fml = argmaxj^g^ P{F) 
where ^ {F : FAs = CsAsF and FBp = CpBpF}, and 
applying this error again to correct it (since F^ = ±/). As 
we will now explain, finding the most likely error is not the 
optimal decoding strategy in quantum mechanics. 

The property that As and Bp leave each code state invariant, 
c.f. Eq. ([TJ, is inherited by the Abelian group generated by 
them, called the stabilizer group ~ {As, Bp). This induces 
an equivalence relation between operators on (C^)®". If two 
operators F and F' differ by an element of J^, for instance 
if F' = FB^Aj, then they will have an identical effect 
on by definition. Notice that the plaquette operators Bp 
are elementary loops of Z on the lattice, so their products 




Fig. 1 . A green line indicates tlie presence of a Z operator on qubit associated 
to the edge, and blue line indicates a X. All Z-type operators are strings on 
the lattice while X-type operators are strings on the dual lattice. Trivial loops 
on the a) lattice and b) dual lattice corresponding to Bp and As respectively. 
Loops with non-trivial homology c) on the lattice and d) on the dual lattice 
corresponding to the 4 generators of J^. e) A tiivial loop obtained by product 
of elementary trivial loops. 



generate the group of homologically trivial loops on the torus, 
see Fig. [T] Likewise, the star operators generate the group 
of homologically trivial loops of X on the dual lattice. We 
conclude that two operators F and F' have the same effect on 
the code if FF' contains only homologically trivial loops, in 
which case we say that F and F' are homologically equivalent. 

On the other hand, there are 4 independent operators that 
map "if to itself (i.e. commute with all star and plaquette 
operators) but do not belong to they correspond to the 
homologically non-trivial loops of Z and X around the hole 
and the body of the torus, see Fig. [T] They generate a group 
with 2'* = 16 operators called the logical Pauli operators 
and are associated with two encoded qubits. Because 
L and LS are equivalent for S E , the choice of the 
4 generators of ^ depicted on Fig. [T| is to some extent 
arbitrary, only the homology class of the operators matters. 
Thus optimal decoding consists in identifying the most likely 
class of homologically equivalent errors, in other words the 
most likely logical operator 

Lml - argmax ^ P{F = LST{cs,c^;)) (3) 

where T{cs,Cp) is any reference error compatible with the er- 
ror syndrome Cs,Cp. Error correction is completed by applying 
LmlT{cs,Cp). Although Eq. (|3]l is expressed in terms of a 
specific choice of generators of ^ and a specific reference 
error T{Cs,Cp) that are not topological invariants, the sum 
over makes the homology class of the correction operator 
LmlT{cs,Cp) independent of these choices. 

III. Renormalization algorithm 

The optimal recovery scheme described above is in general 
very hard to achieve computationally. In particular, summing 
over the entire group of loops ^ is a formidable task. To 
circumvent this difficulty, we will attempt to "divide and 
conquer" using an approach inspired by the renormalization 
group method of statistical mechanics. We break the lattice 
into overlapping "unit cells" as illustrated in Fig. [3] Each of 
these cells contains 12 edges, and hence 12 qubits. The choice 
of this unit cell is somewhat arbitrary, but we will stick to 















^2 










1 \' 












1 























Zf 







2l 












xf 





-xf 




zf 




_l\zi 






xf 





Fig. 2. Definition of tlie Pauli operator basis used in the renormalization 
algoritlim, color scheme as in Fig. [T] This operator basis obeys canonical 
commutation relations: any two operators commute, except if they are 
illustrated on the same unit cell in which case they anti-commute. Operators 
defined in the first two rows are stabilizer generators and pure errors, on the 
third row are logical operators, and on the last row are edge operators. 



this particular example for concreteness. This cell encloses 6 
stabilizer generators in total, three plaquettes and three sites 
(shown on the first two rows of Fig. |2]). We can use these 
stabilizers to define a (small) error-correcting code — a surface 
code mi, lfT2l . open boundary version of Kitaev's toric code. 

To describe the algorithm, it is convenient to choose a set 
of generators for the Pauli group on the lattice. Our choice 
is defined in Fig. [2] Note that these operators obey canonical 
commutation relations, the same as the one of and Z^: any 
two of these operators commute except for the two illustrated 
on the same unit cell that anti-commute. We also group these 
operators into three categories that play different roles in our 
algorithm, as we now explain. 

The stabilizer generators Ag and Bp play the same double 
role as explained in the previous section: they are measured to 
read-out the error syndrome, and they induce an equivalence 
relation between operators. They generate the stabilizer group 
containing 2^ — 64 elements. Their conjugate partners Ag 
and Bp, that we call "pure errors", are used to construct the 
reference error T{cs,Cp) appearing in Eq. (|3]l in a system- 
atic way. Indeed, it follows from the canonical commutation 
relations that the operator 



Tics,cp)^ n n 

s:Cs — — 1 p:Cp — — 1 



(4) 



is an error with syndrome Cs,Cp. 

The four logical operators are representative of the ho- 
mologically non-trivial loops (although they don't look like 
loops, they are strings with no ends on the lattice, which 
is the definition of a loop). They generate the logical group 



J^' containing 2* = 16 elements. In our recursive decoding 
algorithm, these four generators will be mapped onto single 
qubit operators on a renormalized lattice of half the linear 
size. Hence, our goal is to assign probabilities to these logical 
operators, that will serve as an effective channel for the 
following recursion. 

Finally, the four pairs of edge operators are needed to 
complete the set of generators, and correspond roughly (but 
see below) to qubits that are shared between neighboring unit 
cells. They generate the edge group (o containing 4^ = 256 
elements. Thus, they will be used to "glue" neighboring unit 
cells into a renormalized unit cell used in the following 
recursion of the algorithm. 

With these definitions in place, we can describe the ele- 
mentary step of our renormalization procedure on a given cell, 
which consists in computing a conditional probability distri- 
bution. We are given a list of syndromes {cs,Cp) € {—1,1} 
associated to the six stabilizer generators on the unit cell. We 
collectively denote these syndromes by c. We are also given a 
probability P{F) of errors F contained on the cell. In the first 
step of the recursion, this probability is set by the channel, e.g. 
Eq. (|2]), and in the fc'th step it is given by the output of step 
fc — 1. From these, we compute the joint probability on the 
logical and edge group elements conditioned on the syndrome 



PiL,E\c) 



LEST{c)), 



(5) 



where T(c) is the reference error defined at Eq. (|4]), and 3^ is 
a normalization factor. Note that this equation is very similar 
to the definition of the maximum-likelihood decoder Eq. ([3]l, 
except that we must now include edge operators and we do 
not commit to a hard decision but instead keep the entire 
probability vector. This procedure is repeated for all the unit 
cells of the lattice (this can be done in parallel, so in a constant 
amount of time). 

We will be using different marginals of this probability. 
For each cell, we can define the marginal probability on the 
logical and edge operators by P{L\c) — J^EeS -^i-^^ -^\'^) 
and PiE\c) = X^Le^ respectively. Notice that, 
up to multiplication by Ag and Bp, the edge operators E 
are supported only on those qubits that are shared between 
neighboring unit cells. For instance, the product XfB^ is the 
operator X acting on the bottom shared qubit, see Fig. |2] 
Moreover, because the pure error component of the error is 
determined by c, c.f. Eq. (|4]), we can directly interpret the 
conditional probability on the edge operators as a probability 
distribution for Pauli operators on the shared qubits. This 
feature will be important when we describe how we glue unit 
cells together using belief propagation. 

Each of these marginal probabilities can be broken down 
even further. Remember that the logical operators ^ are gen- 
erated by two pairs of canonically conjugated operators Xj and 
Zj, j = 1,2, representing the two logical qubits, c.f. Fig. |2] 
Thus, every operator in ^ can be written as L ~ L1L2 with 
Lj e = {Xj, Zj). We can consider the marginal on one of 
the two logical qubits by summing over the value of the other 
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Fig. 3. The lattice is broken into overlapping unit cells (black) that are 
shifted on the figure for illustration purposes. The logical qubits from 8 bare 
unit cells are joined to construct a larger renormalized unit cell (blue). The 
error probability P{F) for this larger unit cell is obtained by combining the 
underlying logical operator distributions conditioned on the error syndromes of 
each cell. When both logical qubits of a unit cell participate in the construction 
of the larger cell, the induced error model on these qubits is correlated as 
illustrated on the figure. When only one logical operator participates in the 
construction, we consider the marginal distribution on that logical qubit. 



variable, e.g. P{Li\c) — 'Yl,L2e^-^ ^ ^1-^2 |c). Likewise, 
the edge operators are generated by four canonical pairs of 
edge operators X ^ and Z ^ , each encoding an edge qubit, c.f. 
Fig. |2] We can express any edge operator as _E = E1E2E3E4 
with Ej e S'j = {X^,Z^), and consider marginals such as 
P{Ei\c) - Ei=;'e^,x^3xA^(^ = E,E'\c). Following the 
discussion above, these marginal probabilities can be directly 
interpreted as probability of the Pauli operators acting on the 
shared qubits. For instance, P{Ei\c) is the error probability 
of the bottom shared qubit conditioned on the error syndrome 
of the unit cell. 

To complete one step of the renormalization procedure, 
we join the logical operators from 8 "bare" unit cells into 
a larger renormalized unit cell as shown on Fig. |3] In a 
first approximation, we can use the probabilities P{L\c) from 
each bare unit cell to assign an effective error model to the 
renormalized unit cell. Note that the conditional probability 
P{L\c) defined above is a joint probability distribution on 
two logical qubits. As a consequence, the renormalized error 
model can have correlated errors between neighboring qubits. 
This is not a problem when the two qubits appear in the 
same renormalized unit cell. We can take these correlations 
into account in our definition of the renormalized error model 
P{F). However, when these two correlated qubits belong 
to two distinct renormalized unit cells, it is not possible to 
keep track of these correlations efficiently. In those cases, 
we use the appropriate marginal distributions on each qubit 
to define the renormalized error model, see Fig. [3] In other 
words, we replace P{Li, L2\c) by P{Li\c)P{L2\c). Ignoring 
some of the correlations between the renormalized qubits is 
an approximation used to make our scheme efficient. 

The same procedure can now be executed on each renor- 




Fig. 4. The syndrome Cp associated to a renormalized plaquette operator is 
equal to the binary product of the four smaller plaquette operators contained 
in it. This follows from the fact that all these operators commute, and the 
product of the four operators is equal to the renormalized operator. The same 
holds for the star operators. 



malized unit cell. We can compute the various probabilities 
conditioned on the error syndromes contained in each cell. 
Note that the renormalized star and plaquette operators each 
act on 8 bare qubits, spoiling the locality feature of Kitaev's 
toric code. However, this renormalization of the star and 
plaquette operators is only for the purpose of presenting the 
decoding algorithm. The error syndrome associated to the 
renormalized stabilizer generators [13| can be obtained by 
measuring the original 4-qubit star and plaquette operators and 
multiplying their outcomes as shown in Fig. |4] 

At the last iteration of this renormalization procedure, we 
obtain a probability distribution over the logical operators of 
the encoded qubits, completing the soft decoding procedure. 
The operator with the largest probability can be selected to 
implement the correction. 

IV. Belief propagation 

The unit cells used by the renormalization decoding algo- 
rithm overlap in the sense that some qubits are shared between 
two unit cells. Without these overlaps, each unit cell would 
contain only 2 complete stabilizer generators (Ai and Bi, see 
Fig.|2|i instead of 6. As a consequence, the number of variables 
of the renormalized error model would increase by a constant 
factor at each renormalization step, leading to an exponential 
blowup. Thus, these shared qubits appear to be necessary. On 
the other hand, the presence of shared qubits leads to the main 
approximation of our decoding scheme: a qubit that is shared 
between two unit cells is treated independently by each one 
of them as if it were two independent random variables. This 
can lead to some inconsistencies as illustrated in Fig. |5] 

To improve on this approximation, we allow unit cells to 
exchange messages. The purpose of these messages is to 
update the error model of the shared qubits — or equivalently 
of the edge operators — conditioned on the syndromes of the 
immediate neighboring cells. In short, each cell computes the 
marginal conditional probability of each of its shared qubits (or 
edge operators, as explained above), and passes the probability 
associated to a given edge qubit to the cell sharing it. All unit 
cells can perform this in parallel. Then, each cell reweighs 
the prior error model of its edge qubits by the incoming 
messages. Iterating this procedure leads to a probability that is 
conditionned on the syndromes of an extended neighborhood. 

The procedure can be formalized as a belief propagation 
algorithm. Let P{Eq) denote the marginal probability assigned 
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Fig. 5. Two adjacent unit cells each have one Cp = —1 as illustrated, and 
all the other error syndromes are +1. For the top cell, three errors are equally 
likely to have caused this syndrome: an X error on the qubit to the left, the 
bottom, or the right of the plaquette operator. Similarly for the bottom cell, 
the two dominating errors that could have caused the syndrome are an X 
error to the left and above the plaquette. But in fact, the bottom qubit of the 
top cell and the top qubit of the bottom cell are actually the same qubit; a 
shared qubit. This qubit will be assigned a probability roughly ^ of having 
an X error by the top cell, while the bottom cell will assign the probability 
i, which is inconsistent. On the other hand, because it is doubly suspicious, 
the probability of this qubit having suffered an X error should be dominating, 
but decoding each cell independently fails to recognize this. 
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Fig. 6. Block eiTor probability as a function of the depolarizing strength for 
toric codes on tori of different linear size ^ = 8, 16, . . . , 128. Our decoding 
algorithm yields an error threshold of about 15.2%. 



to edge qubit q (obtained from the channel model or the output 
of the previous renormalization step). At round t, each cell C 
outputs 8 messages m^™*(£'g), one for each of its shared 
qubij^ q, that correspond to some probability vector on Eq G 
{I, X, Y, Z}. At the first round, these messages are initialized 
to the uniform distribution. The cell's outgoing messages at 
time t become its neighbors incoming messages at time < + 1: 



t+l,in 



if cells C and C share qubit q, m^^, 
The message update rule is given by 
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where notation such as J^c denotes the stabilizer group 
generated by the 6 generators enclosed in C, the notation 
q £ C stands for the set of edge qubits contained in C, and 
finally C\q denotes all the edge qubits in C except q. 

The messages roughly converge to steady distributions after 
a few iterations of this procedure (we typically use 3, since 
the graph contains 4-cycles). Once convergence is reached, 
the renormalization algorithm is executed on each cell as 
explained in the previous section, but using the incoming 
messages to the cell to reweigh the prior probabilities on the 
shared qubits. 

V. Results 

We have assessed the performance of our decoder using 
Monte Carlo sampling. Figure |6] summarizes our results. It 
shows a clear threshold near the depolarizing probability 
p ~ 15.2%, very close to what is achieved by the perfect 
matching decoder of [Lj. Thus, we obtain an exponential gain 
in decoding time without significant performance loss. 

'Each unit cell has 4 edge qubits, and overlaps with one edge qubit of each 
of its 4 neighboring cell, for a total of 8 shared qubits. 



Many modifications can be made to the basic decoding 
scheme presented here that allow tradeoffs between decoding 
complexity and error suppression. Some of these extensions 
were presented in |9|, and in particular they achieved a depo- 
larizing threshold higher than the perfect matching algorithm. 
We have also adapted our decoder to other noise models, 
such as the erasure channel, and other topological codes, in 
particular the color codes of 1 3 1 . 
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